KR100756611B1 - Renewal method and renewal apparatus for an ic card having biometrics authentication functions - Google Patents

Abstract

The present invention relates to an update device for an IC card having a biometric authentication function for personal authentication using biometric information. The present invention relates to an IC card having a biometric authentication function that prevents leakage of biometric information and updates it while performing rigorous identity verification. It is an object of the present invention to provide an update method and an IC card update apparatus.

The control unit 22 performs identity verification by the biometric authentication function of the old IC card 5, and strictly performs identity verification with the IC card with the biometric authentication function. If identity verification is satisfactory, the biometric data obtained by this biometric authentication is registered in the new IC card 5-1 in which validity is confirmed. As a result, leakage of biometric information can be prevented and updated by one imaging.

Description

Renewal method and IC card updating apparatus of IC card which has biometric authentication function {RENEWAL METHOD AND RENEWAL APPARATUS FOR AN IC CARD HAVING BIOMETRICS AUTHENTICATION FUNCTIONS}

1 is a block diagram of a biometric authentication system according to an embodiment of the present invention.

2 is a configuration diagram of the IC card updater of FIG.

3 is a configuration diagram of the imaging device of FIGS. 1 and 2.

4 is a block diagram of the IC card updater of FIG. 2;

5 is a configuration diagram of the IC card of FIGS. 1 and 4;

6 is an explanatory diagram of authentication data of the IC card of FIG. 5;

7 is an explanatory diagram of an authentication method of the IC card of FIG. 6;

8 is a functional block diagram of biometric information registration / control processing according to an embodiment of the present invention.

9 is an explanatory view of the blood vessel image of FIG. 8;

10 is an explanatory diagram of blood vessel image data of FIG. 9;

11 is an explanatory diagram of characteristic data A and B of FIG. 8;

12 is an explanatory diagram of an IC card update process according to one embodiment of the present invention;

FIG. 13 is a first flowchart of the IC card update process of FIG. 12; FIG.

FIG. 14 is a second flowchart of the IC card update process of FIG. 12; FIG.

FIG. 15 is a first explanatory diagram of a guidance screen for updating processing in FIGS. 13 and 14.

16 is a second explanatory diagram of a guidance screen for updating processing in FIGS. 13 and 14.

Fig. 17 is a block diagram of an IC card updater according to another embodiment of the present invention.

18 is a block diagram of the IC card updater of FIG.

19 is a first explanatory diagram of a guidance screen for updating processing in FIGS. 17 and 18.

20 is a second explanatory diagram of a guidance screen for updating processing of FIGS. 17 and 18.

<Explanation of symbols for main parts of drawing>

1, 1-1: palm imaging device

2, 7: counter

3, 8: counter terminal

4: server

4a: memory

5, 5-1: IC card with biometric authentication function

6: ATM

9, 9-1: IC card reader / writer

20: IC card updater

22: updater body

24: customer control panel

The present invention relates to an IC card updating method and an IC card updating device having a biometric authentication function for personal authentication by using a feature of a living body which is a part of a human body, and in particular, to prevent the leakage of biometric information while performing identity verification. The present invention relates to an IC card updating method and an IC card updating device having a biometric authentication function.

In the human body, there are many parts that can distinguish individuals such as fingerprints of hands and feet, retina of eyes, face, and blood vessels. With recent advances in biometric technology, various devices for recognizing the characteristics of a living body, which are part of the human body, are provided.

For example, the blood vessels and palms of a palm or a finger can obtain a relatively large amount of personal characteristic data, which is suitable for the reliability of personal authentication. In particular, the shape of the blood vessel (vein) does not change for a lifetime from the fetus, it is suitable for personal authentication because it is all-in-one immobility. In the palm authentication method, when a user brings the palm close to the imaging device at the time of registration or authentication, the imaging device emits near infrared rays to irradiate the palm. The imaging device receives near infrared rays reflected from the palm of the hand with a sensor.

Hemoglobin in the red blood cells flowing in the veins is losing oxygen. Since this hemoglobin (reduced hemoglobin) absorbs near infrared rays near 760 nm, when the near infrared rays are irradiated to the palm, only the part with veins is less reflected and the position of the veins can be recognized by the strength of the reflected near infrared rays.

The user first registers the vein image data of his palm on the server or card using the imaging device. Next, for personal authentication, the user causes the vein image data of his palm to be read using the imaging device. Personal authentication is performed by matching the vein registration image derived by the user's ID with the shape of the vein of the read vein control image (see Patent Document 1, for example).

In such a biometric authentication system, it is necessary to consider that the characteristic data of the living body does not leak to the outside. For this reason, in the field of fingerprint authentication, the personal data of the fingerprint is registered on an IC (Integrated Circuit) card having a biometric authentication function, and the personal data of the fingerprint is read from the fingerprint sensor and collated in the IC card to perform personal authentication. This is proposed (patent document 2).

In this method, since the IC card is executed at the time of personal authentication, the leakage of characteristic data of the living body can be prevented, and the safety of the personal data can be maintained.

[Patent Document 1]

Japanese Patent Laid-Open No. 2004-062826 (FIGS. 2 to 9)

[Patent Document 2]

Japanese Patent Laid-Open No. 2000-293643 (Figs. 5 and 6)

On the other hand, such an IC card also has an expiration date, and it is necessary to update the IC card. In a card with a magnetic strip or an IC card without an authentication function, a method of sending a new card (hereinafter also referred to as a "new card") in which data is stored at the issuer to a user and discarding the old card is adopted. It is becoming.

However, in the IC card with the biometric authentication function, since the characteristic data of the living body is stored only in the IC card as described above, the issuing destination cannot issue a new card storing the characteristic data of the living body. For this reason, the user cannot use the biometric authentication function unless the biometric characteristic data is re-registered on the new IC card.

In the re-registration of the characteristic data of the living body to the new IC card, if the characteristic data of the living body is allowed to the person with the new IC card sent from the issuer, the characteristic data of the living body of another person is registered unless the bringing person is the person. It causes the possibility of misuse. On the contrary, if extraction of the feature data of the living body is allowed from the IC card, there is a problem that the feature data of the living body is leaked.

It is therefore an object of the present invention to provide an IC card updating method and an IC card updating apparatus having a biometric authentication function for executing an IC card update in a safe environment while maintaining the confidentiality of the characteristic data of the living body.

Another object of the present invention is to provide an IC card updating method and an IC card updating apparatus having a biometric authentication function for preventing re-registration of biometric information other than the person while maintaining the confidentiality of the characteristic data of the living body. have.

Still another object of the present invention is to provide an IC card updating method and an IC card updating apparatus having a biometric authentication function for updating an IC card in a safe environment while preventing the leakage of characteristic data of a living body.

In order to achieve the above object, the IC card updating apparatus of the present invention registers the feature data of a living body detected from the living body, and performs a biometric authentication function by comparing the registered characteristic data with the registered characteristic data of the living body obtained by detecting the living body. An IC card updating apparatus for updating an IC card to have, comprising: a detection device for detecting the living body, an IC card reader / writer for reading / writing the old IC card and a new IC card to be updated, and an output of the detection device And a control unit for extracting the feature data of the living body from the feature data and transmitting it to the old IC card, wherein the control unit checks the registered feature data and the transmitted feature data with the biometric authentication function of the old IC card. As a result, when the biometric authentication is satisfactory, the extracted feature data is registered in the new IC card.

In addition, the IC card updating method of the present invention has an IC having a function of registering biometric characteristic data detected from a living body, and biometric authentication by matching the biometric characteristic data obtained by detecting the biometric with the registered characteristic data. A method of updating a card, the method comprising: extracting feature data of the living body by detecting the living body; transmitting the extracted feature data to an updated old IC card; and performing the biometric authentication function of the old IC card. Collating the registered characteristic data with the transmitted characteristic data, and registering the extracted characteristic data with the new IC card when the biometric authentication is good according to the collating result.

In the present invention, preferably, the control unit closes the biometric authentication function of the old IC card after registration with the new IC card.

In the present invention, preferably, the control unit checks the owner information of the old IC card and the new IC card read by the IC card reader / writer, and justifies the correspondence between the old IC card and the new IC card. Check.

In the present invention, preferably, the control unit confirms the validity of the old IC card and the new IC card from the issue information of the old IC card and the new IC card read by the IC card reader / writer.

In the present invention, preferably, the control unit deletes the feature data in the old IC card after registration with the new IC card.

In this invention, Preferably, the said detection apparatus was comprised with the imaging device which image | photographs the living body of a user.

In the present invention, preferably, the imaging device includes a unit for imaging the blood vessel image of the user.

In the present invention, preferably, the IC card reader / writer is a first IC card reader / writer for reading / writing the old IC card, and a second IC card reader / writer for reading / writing the new IC card. Configured.

In the present invention, preferably, the control unit registers the feature data on the new IC card, then detects the living body again from the detection device, extracts the characteristic data of the living body from the output of the detection device, The new IC card is sent to check the registered feature data with the transmitted feature data.

In the present invention, preferably, the old IC card and the new IC card have only the biometric authentication functions of the old and new IC cards to access the registered biometric characteristic data.

In the present invention, since identity verification is performed by biometric authentication with the old IC card, the identity card and identity verification with a biometric authentication function can be strictly performed, and an irregularity in renewal can be prevented. In particular, when the IC card is stolen or picked up, the IC card can be prevented from registering the biometric data in the reissued IC card.

If identity verification is satisfactory, the biometric data obtained by the biometric authentication is registered in the new IC card whose validity is confirmed. As a result, the biometric data that has been identified by the old IC card can be registered to the new IC card without leaking to the new IC card in one imaging, and the biometric data can be easily and reliably transplanted into the new IC card. have.

(Example)

Embodiments of the present invention will be described below in order of a biometric authentication system, a biometric authentication process, an IC card update method, an IC card update process, the form of another IC card updater, and another embodiment.

[Biometric Authentication System]

1 is a block diagram of a biometric authentication system according to an embodiment of the present invention, FIG. 2 is a block diagram of the IC card updater of FIG. 1, FIG. 3 is a block diagram of the palm imaging device of FIGS. 1 and 2, and FIG. The block diagram of the IC card updater of FIG. 2 is a block diagram of the IC card which has the biometric authentication function of FIGS.

1 shows, as an example, a palm vein authentication system in a financial institution as a biometric authentication system. The window 2 of a financial institution is provided with the palm image capture device 1 described in Figs. 2 and 3 and a work station terminal (for example, a personal computer) 3 connected thereto. The user who requested vein authentication touches the palm imaging device (hereinafter referred to as imaging device) 1. The imaging device 1 reads the palm, and the vein shape is extracted by the blood vessel image extraction process of the terminal device 3, and is registered on the terminal device 3 side as vein data.

The vein data is recorded in the storage unit 4a of the database server 4 connected to the terminal device 3 or in the personal card (for example, IC card) 5 possessed by the user. The server 4 is connected to the window terminal device 8 of the financial institution window 7, and the window terminal device 8 is connected to the imaging device 1.

In order to perform a financial transaction such as a withdrawal transaction at a window 7 of a financial institution, a user inserts an IC card into the IC card reader described in FIGS. 2 and 4, and further includes an imaging device (provided in the window 7). 1) Hands on The imaging device 1 reads the palm and the vein shape is extracted by the blood vessel image extraction process of the window terminal device 8. The window terminal device 8 confirms the identity by matching the vein shape with the vein data registered in the IC card 5 as the vein data by a verification process.

In addition, the server 4 connects an ATM (automatic teller machine) 6 of a financial institution, and enables transactions by vein authentication using the ATM 6. The user touches the imaging device 1-1 provided in the ATM 6 in order to perform a financial transaction such as a withdrawal transaction using the ATM 6. The imaging device 1-1 reads palms. The ATM 6 extracts the vein shape (vessel shape) similarly to the window terminal device 8, and verifies the identity of the vein by comparing it with the vein data registered in the IC card 5 possessed by the user as vein data.

In addition, the IC card updater 20 described in FIGS. 2 and 4 is connected to the server 4.

2 is a configuration diagram of the IC card updater of FIG. 1. As shown in Fig. 2, the IC card updater 20 includes an updater main body 22, an authentication device 26 having an IC card reader and a palm imaging device (vein sensor), and an IC card reader / writer. It consists of (9-1). The updater main body 22 is comprised, for example with a personal computer, and has the customer operation part 24 comprised with the display with a touchscreen.

The IC card reader / writer 9-1 reads / writes the IC chip and the magnetic strip of the IC card 5 of the user described later in FIG. In the IC card reader / writer 9, a security application module (SAM) is provided, and only the authorized access is accepted to maintain the security of the IC card 5.

In addition, as shown in FIG. 2, the authentication device 26 mounts the sensor unit 18 near the center of the main body 10. The front guide 14 is provided in the front part (user side) of the sensor unit 18, and the rear guide 19 is provided in the back part. The front guide 14 is composed of a transparent or nearly transparent synthetic resin plate.

The front guide 14 serves to guide the hand on the front and to support the wrist. Thus, on the upper side of the sensor unit 18, the front guide 14 supports them while guiding the user to guide the wrist. For this reason, the posture of a palm, ie, a position, inclination, and a magnitude | size of a palm can be regulated from the upper side of the sensor unit 18. In addition, the cross-sectional shape of the front guide 14 has a vertical body and a horizontal portion 14-1 supporting the wrist on the top. A depression 14-2 is formed continuously in the center of the horizontal portion 14-1, so that the position of the wrist can be determined more easily. The rear guide 19 serves to support the finger.

As shown in FIG. 3, the sensor unit 18 includes an infrared sensor (CMOS sensor), a condenser lens 16, and a distance sensor 15 at a center thereof, and a plurality of near-infrared light emitting elements (LEDs) around the sensor unit 18. 12 is installed. For example, a near-infrared light emitting element is provided at eight surrounding points, and emits near-infrared light upwards.

In the sensor unit 18, the readable region is restricted to V by the relationship between the sensor, the condenser lens, and the near-infrared light emitting region. For this reason, the position and height of the front guide 14 are set so that the palm to be supported may be located in the reading area V. FIG.

When the hand 52 is in the form of a rock-paper-scissors, the palm is the largest area and is flat. Therefore, if the palm is imaged in the imaging range V of the sensor unit 18, an accurate vein pattern can be obtained and registered. It is effective in contrast. In addition, if the distance of the palm from the sensor unit 18 is within a predetermined range, a clear image in focus can be obtained by the sensor 16 of the sensor unit 18.

Thus, as shown in FIG. 3, the front guide 14 supports the wrist 52 on the upper side of the sensor unit 18, whereby the position, inclination and height of the palm on the upper side of the sensor unit 18 are measured by the sensor. The user's hand can be guided and supported to be accurate with respect to the imaging range of the unit 18.

In addition, the palm imaging apparatuses 1 and 1-1 of FIG. 1 also have the same structure. The authentication device 26 of FIG. 2 further includes an IC card reader / writer 9 in the main body 10 in addition to the palm imaging device 1.

As shown in FIG. 4, the updater main body 22 cooperates with the customer operation part 24, the update application 30 which performs the update process of the IC card 5, and the vein authentication library for vein authentication process ( Program) 34. The update application 30 connects with the host (server) 4 and notifies the update state.

The authentication device 26 has an IC card reader / writer 9, a vein sensor 1, and a controller (security application module) 32. The IC card reader / writer unit 28 has an IC card reader / writer 9-1 and a controller (security application module) 36.

5 is a block diagram of an IC card having the biometric authentication function of FIGS. 1 to 4. As shown in FIG. 5, the IC card 5 includes a central processor unit (CPU) 50, a read only memory (ROM) 54, a random access memory (RAM) 56, and an EEPROM 58. Has The ROM 54 stores an operating system (OS) or the like.

The EEPROM 58 includes a program 510 of the vein authentication application 51, a firewall 53, a financial application 55, its firewall 57, other applications 59, and a file 520. Save it. The program 510 of the vein authentication application 51 has read write processing logic, update write processing logic, and verify processing logic. This verification processing logic includes vein authentication logic (secondary matching algorithm) 512.

On the other hand, the file 520 stores vein A part data (described later in FIG. 9) and vein B part data (described later in FIG. 9) recorded from the terminal at the time of vein registration. Intravenous A part data is referred to as a reading record from the terminal at the time of venous control (first control). The venous B portion data is referenced by the venous authentication logic 512 at the time of verification command processing (at the second collation) and provided to the second collation of the venous authentication logic 512.

The other data 526 is also known RSA (secret key / public key) method data used as an IC cash card and is referred to as a read record by the terminal in card authentication (SDA processing).

That is, as shown in Fig. 6, the issuer public key is encrypted using the signed application data obtained by encrypting the static authentication data and the static authentication data with the issuer private key, and the CA public key of the CA 100. SDA data consisting of the issuer public key certificate issued from 100), holder information such as account number, and the like. This SDA data is for the terminal 3, 6, 8, 22 to authenticate offline whether the card is issued from a legitimate issuer.

As shown in Fig. 7, for example, the issuer public key is extracted by decrypting the issuer public key certificate encrypted with the CA secret key read from the IC card 5 with the certificate authority public key at the terminals 3, 6, 8, 22. do. Next, the signed application data encrypted with the issuer secret key read from the IC card 5 is decrypted using the issuer public key extracted from the terminals 3, 6, 8, 22, and the static authentication data is extracted. Further, validity is verified by comparing the static authentication data read from the IC card 5 with the decrypted static authentication data. Accordingly, the terminal authenticates offline whether the card was issued from a legitimate issuer.

On the other hand, the common key is a DES authentication method for mutual authentication between the IC card 5 and the terminal (or host). To authenticate the terminal, the terminal encrypts the authentication data with the common key, obtains an authentication code, and obtains this authentication code Is transmitted to the IC card 5, and the validity of the authentication code is verified by comparing the authentication data with the authentication code encrypted with the common key on the IC card 5 side.

In addition, in order to authenticate the IC card 5, the authentication data is encrypted with a common key using the IC card 5, an authentication code is obtained, the authentication code is transmitted to the terminal, and the authentication data is encrypted with the common key at the terminal side. Validate the verification code against the code.

[How to handle biometric authentication]

8 is a block diagram of a biometric authentication process according to one embodiment of the present invention, FIG. 9 is an explanatory view of the detection vessel image of FIG. 8, FIG. 10 is an explanatory view of the control process of FIG. It is explanatory drawing of (A, B).

As shown in FIG. 8, the authentication libraries 34 of the window apparatuses 3 and 8 and the IC card updater 20 connected to the imaging apparatus 1 perform a series of registration and verification processes (34-1 to 34-). Run 6). In addition, as will be described later, the CPU 50 of the IC chip of the IC card 5 also performs matching processing (secondary matching) 34-3.

The distance / hand outline detection process 34-1 receives the measurement distance of the distance sensor 15 from the imaging apparatuses 1 and 1-1, so that an object such as a palm is placed within a predetermined range from the sensor unit 18. In addition, the sensor unit 18 detects the contour of the hand from the image picked up by the sensor unit 18 to determine whether the image is an image that can be used for registration and collation processing. For example, the palm is not sufficiently exposed to the image.

The guidance message output processing 34-5 is performed when the hand or the like is out of the imaging range due to the detection distance of the distance sensor 15 or the position of the hand by the contour extraction of the hand, and when the image cannot be used for registration and contrast processing, Messages for guiding the palms left, right, front, back, and up and down are output to the display of the customer operating unit 24 of the window apparatuses 3 and 8 or the IC card updater 20. Thereby, the palm of the user who put in the imaging device 1 is guide | induced.

The blood vessel image extraction process 34-2 extracts the venous blood vessel image from the image of the hand when the hand outline detection process 34-1 determines that the image can be picked up by the proper touch method. That is, grayscale data of the image of the palm as shown in FIG. 10 can be obtained by the difference in reflectance as described in the above-described prior art. The vein blood vessel image is an image as shown in FIG. 9, and the data is grayscale data as shown in FIG.

The registered blood vessel image search processing 34-4 is registered blood vessel image data A corresponding to the personal ID (account number) from the storage unit 56 of the IC chip of the IC card 5 shown in Figs. 1, 4 and 5. ). The control process 34-3 compares the blood vessel image data N1 detected by the blood vessel image detection process 34-2 with the registered blood vessel image data N2 as shown in FIG. Output

As shown in FIG. 11, the plane data (vascular data) R can be classified into a stem Aa, a thick branch Ab, and a thin branch Ac connected to the thick branch, as understood in FIG. 9. have. The stem A1 and the thick branch A2 are classified into relatively rough feature data A, and the thin branches Ac are classified into relatively detailed feature data B to create registration data A and B. FIG. do. Since the registration data A is relatively schematic, it does not show detailed features but shows large features. Since the registration data B is relatively detailed, it shows detailed characteristics.

The registration process 34-5 classifies the blood vessel image data (A) of a relatively large level from the detected blood vessel image data and the blood vessel image data (B) of a comparatively precise level, and uses the IC card reader / writer 9 through the IC card reader / writer 9. ) Is stored in the IC chip 50.

That is, the authentication library 34 of the terminal checks with reference to the venous A portion data of the IC card 5 described in Fig. 5 (this is referred to as primary matching). On the other hand, the vein authentication logic 512 of the vein authentication application 510 of the IC card 5 described in FIG. 5 refers to the data of the part B of the IC card 5 (this is referred to as secondary collation).

In such a blood vessel image authentication system, making both the concealment of blood vessel image data and the reliability of the IC card update effective is effective for the secure update of the IC card having the biometric authentication function.

[IC card renewal method]

Fig. 12 is an explanatory view of the procedure of the IC card updating method according to the embodiment of the present invention, and shows an example in which the IC card updater 20 of Figs. 1, 2 and 4 is used.

(1) The user is allowed to use an expired biometric authentication IC card 5 (formerly known as an IC card) and a reissued biometric authentication function attached card (called a new card) (5-1). Is inserted into each IC card reader / writer 9 and 9-1. After inserting the IC card, each IC card reader / writer 9, 9-1 performs extraction monitoring of the IC card until the re-registration process is completed, and when the one IC card is removed, processing is performed. Stop.

(2) First, with respect to the old IC card 5, the update application 30 of the terminal 22 performs card authentication by the RSA method described in Figs. 6 and 7 described above via the IC card reader / writer 9. Check the validity of the card. Similarly, with respect to the new IC card 5-1, the terminal 22 performs card authentication via the IC card reader / writer 9-1 by the RSA method described in Figs. 6 and 7 described above. Check for justification.

(3) Next, the update application 30 of the terminal 22 transmits the personal information (account number of the holder data of FIG. 5) inside the old IC card 5 via the IC card reader / writer 9 and 9-1. And the like, and personal information (account number of holder data of FIG. 5, etc.) inside the new IC card 5-1 are read and compared. This confirms that the new IC card 5-1 is a reissue card of the old IC card 5. The terminal 22 confirms that the biometric data is not registered via the IC card reader / writer 9 with respect to the new IC card 5-1.

(4) Next, the update application 30 of the terminal 22 performs the imaging of the biometric data by the vein sensor 1 of the authentication device 26, and obtains the blood vessel image data C of the palm. The update application 30 of the terminal 22 compares the blood vessel image data C with the vein data A of the old IC card 5 by the authentication library (analysis check) 34. If the result of the verification is good, the venous data B 'created from the blood vessel image data C is transmitted to the old IC card 5, and the old IC card 5 is controlled by the venous authentication logic 512 of the old IC card 5; Contrast with intravenous B part data (B). Thereby, biometric authentication with the old IC card 5 is performed.

(5) If the identity can be confirmed by biometric authentication with the old IC card 5, the biometric data of the new IC card 5-1 is registered based on the blood vessel image data C imaged in (4). That is, the vein data A 'and B' created from the blood vessel image data C are transmitted to the IC card reader / writer 9-1, and the file 520 is updated by the update recording process of the new IC card 5-1. In the areas 522 and 524, respectively.

(6) For verification, the updating application 30 of the terminal 22 performs imaging of the biometric data by the vein sensor 1 of the authentication device 26, and obtains the blood vessel image data C of the palm. The update application 30 of the terminal 22 compares the blood vessel image data C with the venous data A 'of the new IC card 5-1 by the authentication library (analysis check) 34. If the verification result is good, the vein data B 'created from the blood vessel image data C is transmitted to the new IC card 5-1, and the new vein authentication logic 512 of the new IC card 5-1 is used. It compares with the venous B part data B 'registered in the IC card 5-1. Thereby, biometric authentication processing with the new IC card 5 is performed.

(7) If the identity can be confirmed by biometric authentication with the new IC card 5-1, the update application 30 of the terminal 22 passes through the IC card reader / writer 9 and the old IC card 5 The biometric data A and B are deleted. For example, nulls (both "1") are recorded in the areas 522 and 524 of the file 520 by the update recording process of the old IC card 5. In addition, the update application 30 of the terminal 22 deactivates the vein authentication function of the old IC card 5 via the IC card reader / writer 9. In other words, the vein authentication application 51 is closed. As a result, the biometric data is deleted from the old IC card 5, and the vein authentication function is also deactivated. For this reason, the old IC card 5 becomes a card which does not have a biometric authentication function.

In this way, first, it is confirmed whether the old IC card and the new IC card are the IC cards duly issued from the issuer, and the validity of the IC card itself to be updated is checked. Next, identity verification is performed by biometric authentication with the old IC card. For this reason, the IC card with a biometric authentication function and identity verification can be performed strictly, and the denial at the time of an update can be prevented. In particular, when an IC card is stolen or lost, a biometric data may be registered in a reissued IC card by another user and the original user, and such fraud prevention is effective.

If identity verification is satisfactory, the biometric data obtained by the biometric authentication is registered in the new IC card whose validity is confirmed. As a result, the biometric data that has been identified by the old IC card can be registered to the new IC card without leaking to the new IC card in one imaging, and the biometric data can be easily and reliably transplanted into the new IC card. have.

In addition, in order to verify the registered biometric data of the new IC card, test authentication is performed, and the biometric authentication function of the updated new IC card is verified. If this verification is satisfactory, the deletion of the biometric data of the old IC card and the deactivation of the vein authentication function are performed, and the old IC card 5 is made into a card without the biometric authentication function and cannot be used.

For this reason, it is possible to prevent the leakage of biometric data by IC card update. In particular, if biometric data and vein authentication function remain in the old IC card, there is a possibility of being a hotbed for leaking or analyzing biometric data, and it is very effective to exclude this.

[IC card update processing]

Next, the processing for the IC card updating method described in FIG. 12 will be described with reference to FIGS. 13 to 16. 13 and 14 are flowcharts of an IC card update process, and FIGS. 15 and 16 are explanatory diagrams of the guidance screen thereof.

(S10) The update selection screen G1 of FIG. 15 is displayed on the customer operation unit 24 of the IC card updater 20. Since the user wishes to update, the user touches the start icon of the selection screen G1. Accordingly, the update process is started. The user inserts the IC card 5 (old IC card) with the expired biometric authentication function into the IC card reader / writer 9 according to the old IC card insertion guide screen G2 of FIG. 15. The IC card reader / writer 9 reads the contents (other than the biometric data protected by the biometric authentication application) of the inserted old IC card 5, and the reading screen G3 in FIG. 15 is displayed. After the IC card reader / writer 9 is inserted, the IC card is monitored for extraction until the re-registration process is completed. If the IC card is removed, the processing is interrupted.

(S12) Next, the user inserts the IC card 5-1 (new IC card) with the biometric authentication function according to the new IC card insertion guide screen G4 of FIG. 15 into the IC card reader / writer 9-1. ). The IC card reader / writer 9-1 reads the contents (areas 526 and 528 of the file 520) of the inserted new IC card 5, and the reading screen G5 of Fig. 15 is displayed. . In addition, after the IC card reader / writer 9-1 is inserted, the IC card is extracted and monitored until the re-registration process is completed. If the IC card is removed, the processing is interrupted.

(S14) Next, with respect to the old IC card 5, the update application 30 of the terminal 22 uses the RSA method described with reference to Figs. 6 and 7 described above via the IC card reader / writer 9. Authenticate and verify the validity of the card. If the authentication result is not good, an abnormal message is displayed on the customer operating unit 24, and the processing ends.

(S16) If the validity of the old IC card 5 is good, similarly to the new IC card 5-1, the terminal 22 uses the IC card reader / writer 9-1 described above with reference to Figs. Card authentication is performed by the RSA method described in Fig. 7 to confirm the validity of the card. If the authentication result is not good, an abnormal message is displayed on the customer operating unit 24, and the processing ends.

(S18) Next, the update application 30 of the terminal 22 starts from the personal information (the expiration date of the holder data of FIG. 5) inside the old IC card 5 read by the IC card reader / writer 9. The old IC card 5 confirms that the expiration date has expired or has expired. The update application 30 also compares the personal information (account number, etc.) of the old IC card 5 with the personal information (account number of the holder data in FIG. 5, etc.) inside the new IC card 5-1. . This confirms that the new IC card 5-1 is a reissue card of the old IC card 5. If the confirmation result is not satisfactory, an error message is displayed on the customer operating unit 24, and the processing ends.

(S20) On the other hand, if the confirmation result is satisfactory, the process proceeds to Fig. 14 and, with respect to the new IC card 5-1, the terminal 22 checks whether biometric data is registered through the IC card reader / writer 9; Check. If it is registered, the abnormal operation message is displayed on the customer operation unit 24, and the processing ends.

(S22) Next, if it is not registered, the update application 30 of the terminal 22 displays the palm guidance screen G6 of FIG. 15, and the palm of the user with the vein sensor 1 of the authentication apparatus 26 is performed. Induce. Then, the palm vein sensor 1 performs imaging of the palm, and the imaging process 34-1 described in FIG. 8 is performed. If the imaging result is not good, imaging guidance is guided by the guidance message process 34-5. .

(S24) If the imaging result is satisfactory, the blood vessel image data C of the palm is obtained by the blood vessel image extraction process 34-2 of FIG. The update application 30 of the terminal 22 compares the blood vessel image data C with the vein data A of the old IC card 5 by the authentication library (analysis check) 34. If the matching result is good, the venous data (B ') created from the blood vessel image data (C) is transmitted to the old IC card 5, and the old IC card 5 is transferred by the venous authentication logic 512 of the old IC card 5. To the venous B part data (B). Thereby, biometric authentication with the old IC card 5 is performed. If the authentication result is not good, an abnormal message is displayed on the customer operating unit 24, and the processing ends.

(S26) If the identity can be confirmed by biometric authentication with the old IC card 5, the identity verification screen G8 is displayed on the customer operation unit 24, and based on the blood vessel image data C captured in step S24, The biometric data of the IC card 5-1 is registered. That is, the vein data A 'and B' created from the blood vessel image data C are transmitted to the IC card reader / writer 9-1, and the file 520 is updated by the update recording process of the new IC card 5-1. In the areas 522 and 524, respectively.

(S28) For verification, the update application 30 of the terminal 22 displays the palm guidance screen G9 of FIG. 15, and guides the palm of the user to the vein sensor 1 of the authentication device 26. Then, the palm vein sensor 1 performs imaging of the palm, and the imaging process 34-1 described in FIG. 8 is performed. If the imaging result is not good, imaging guidance is guided by the guidance message process 34-5. .

(S30) If the imaging result is satisfactory, the blood vessel image data C of the palm is obtained by the blood vessel image extraction process 34-2 of FIG. The update application 30 of the terminal 22 displays the authentication process screen G10 of FIG. 16 on the customer operation part 24, and also the blood vessel image data C and the scene by the authentication library (analysis contrast) 34. The venous data A 'of the IC card 5-1 is collated. If the verification result is good, the venous data (B ') created from the blood vessel image data (C) is transmitted to the new IC card 5-1, and the venous authentication logic 512 of the new IC card 5-1 is used to send the new card. It compares with the venous B part data B 'registered in the IC card 5-1. Thereby, biometric authentication processing with the new IC card 5 is performed. If the authentication result is not good, an abnormal message is displayed on the customer operating unit 24, and the processing ends.

(S32) If the identity can be confirmed by biometric authentication with the new IC card 5-1, the update application 30 of the terminal 22 displays the registration end screen G11 of FIG. 16 on the customer operation unit 24. FIG. Furthermore, the biometric data A and B of the old IC card 5 are deleted through the IC card reader / writer 9. For example, nulls (both "1") are recorded in the areas 522 and 524 of the file 520 by the update recording process of the old IC card 5.

(S34) Next, in the IC cards 5 and 5-1, biometric authentication of the agent who has received the consent of the person other than the person is possible, and therefore, the blood vessel image of the palm of the agent can be registered. If necessary, the registration continuation screen G14 of FIG. 16 is displayed by touching the registration icon of the next biometric data from the customer operating unit 24, and the flow returns to step S22.

(S36) On the other hand, when the next biometric data is not registered, the update application 30 of the terminal 22 deactivates the vein authentication function of the old IC card 5 via the IC card reader / writer 9. do. In other words, the vein authentication application 51 is closed. As a result, the biometric data is deleted from the old IC card 5, and the vein authentication function is also deactivated. For this reason, the old IC card 5 becomes a card which does not have a biometric authentication function. Then, the return screen G12 of the new IC card 5-1 is displayed on the customer operation unit 24, and the new IC card 5-1 is returned from the IC card reader / writer 9-1. Next, the return screen G13 of the old IC card 5 is displayed on the customer operating unit 24, and the old IC card 5 is returned from the IC card reader / writer 9. Then, the process ends.

In this way, it is determined that the old IC card has expired or the expiration date has expired, and also checks whether the old IC card and the new IC card are the IC cards duly issued from the issuer, and is used for renewal. Confirm the continuity between the IC cards based on the holder information of the old and new IC cards.

Next, identity verification is performed by biometric authentication with the old IC card. As a result, the IC card with the biometric authentication function and identity verification can be strictly performed. For this reason, when the IC card is stolen or a lost IC card is picked up, it is possible to prevent the possibility of registering biometric data on the reissued IC card by an original user and a different person.

If identity verification is satisfactory, the biometric data obtained by the biometric authentication is registered in the new IC card whose validity is confirmed. As a result, the biometric data that has been identified by the old IC card can be registered to the new IC card without leaking to the new IC card in one imaging, and the biometric data can be easily and reliably transplanted into the new IC card. have.

In addition, in order to verify the registered biometric data of the new IC card, test authentication is performed, and the biometric authentication function of the updated new IC card is verified. If this verification is satisfactory, the deletion of the biometric data of the old IC card and the deactivation of the vein authentication function are performed, and the old IC card 5 is made into a card without the biometric authentication function and cannot be used.

For this reason, it is possible to prevent the leakage of biometric data by IC card update. In particular, if biometric data and vein authentication function remain in the old IC card, there is a possibility of being a hotbed for leaking or analyzing biometric data, and it is very effective to exclude this.

[Mode of Other IC Card Updater]

Next, the form of updating the IC card in the automatic transaction apparatus 6 of FIG. 1 will be described. 17 is an external view of the automatic transaction apparatus of FIG. 1, and FIG. 18 is a block diagram of the automatic transaction apparatus of FIG. 17.

As shown in Fig. 17, the ATM 6 has an IC card insertion / ejection opening 6-4, a bankbook insertion / ejection opening 6-5, a banknote insertion / ejection opening 6-3 on its front face; And a coin insertion / ejection opening 6-2 and a customer operation panel 6-1 for operation and display.

In this example, the imaging device 1-1 is provided beside the customer operation panel 6-1. The sensor unit 18 described in Figs. 2 and 3 is mounted on the front side of the main body 10 of the imaging device 1. The front guide 14 is provided in the front part (user side) of the sensor unit 18. As shown in FIG. This front guide 14 is composed of a transparent or nearly transparent synthetic resin plate. The front guide 14 has a vertical body and a horizontal portion 14-1 for supporting the wrist on the top, in order to guide the hand on the front and to support the wrist. A depression 14-2 is formed continuously in the center of the horizontal portion 14-1, making it easier to position the wrist.

In addition, the sensor unit 18 of the main body 10 is inclined upward toward the rear surface portion, and the flat portion 11 is provided thereafter. In the main body 10 of the imaging device 1-1, an IC card reader / writer 9-1 is provided.

As shown in Fig. 18, the ATM 6 includes a CIP (Card Reader Printer) unit 60 having a card insertion / ejection opening 6-4, and a bankbook unit having a bankbook insertion / ejection opening 6-5. 64, a banknote / coin counting unit 66 having a banknote insertion / ejection opening 6-3 and a coin insertion / ejection opening 6-2, a person in charge operation unit 65, a control unit 67, A customer operation panel (UOP) 6-1 for operation and display, and an imaging device (vein sensor) 1-1 provided with the IC card reader / writer 9 are provided.

The CIP unit 60 deals with the magnetic stripe of the IC card 5 and the IC card reader / writer 61 which reads / writes the IC chip, the specification table printer 63 which records transactions on the specification table, and the journal paper. A journal printer 62 which prints the history and a security access module (SAM) 70 are provided.

The bankbook unit 64 records a transaction on the pages of the bankbook and also turns pages as necessary. The person in charge operation unit 65 performs an operation such as a status display, an error occurrence or an inspection at the time of operation of the person in charge. The banknote / coin counting unit 66 performs discrimination, counting, storing of the inserted banknote / coin, counting and ejection of the required banknote / coin.

The control unit 67 has an ATM application 68 that communicates with the server 4 to control operation of the ATM, and an authentication library (program) 69 for authentication processing. A part of this ATM application 68 cooperates with the authentication library 69 to perform biometric authentication guidance screen control of the UOP 6-1.

In addition, in the relationship between FIGS. 17 and 18 and FIGS. 2 and 4, the IC card reader / writer 61 of FIG. 18 corresponds to the IC card reader / writer 9 of FIG. 2, and FIGS. 17 and 18. The IC card reader / writer 9-1 of FIG. 2 corresponds to the IC card reader / writer 9-1 of FIG. The update application 30 of FIG. 4 is provided in the ATM application 68 of FIG.

In addition, the UOP 6-1 of FIGS. 17 and 18 corresponds to the customer operation unit 24 of FIGS. 2 and 4, and the authentication library 69 of FIGS. 17 and 18 is the authentication library of FIGS. 2 and 4. Corresponds to (34).

19 and 20 are explanatory diagrams of guidance screens for IC card update processing including biometric authentication processing in an automatic transaction apparatus. The IC card update processing is the same as in FIG. 13 and FIG. 14.

The transaction selection screen G20 of FIG. 19 is displayed on the UOP 6-1 of the ATM 6. Here, four transactions can be selected: bank account carryover, balance inquiry, payment, and IC card renewal. Since the user wishes to update, the user touches the IC card update icon on the selection screen G20. Accordingly, the update process is started. In the same manner as in step S10, the user uses the IC card reader / writer 9 to replace the IC card 5 (old IC card) with the expired biometric authentication function according to the old IC card insertion guide screens G2 and G3 in FIG. ).

Next, as in step S12, the user uses the IC card reader / writer (the IC card 5-1) (new IC card) with the biometric authentication function according to the new IC card insertion guide screens G4 and G5 of FIG. 9-1). The normal message is displayed and the process ends.

After steps S14, S16, S18, and S20, the palm guidance screen G6 of FIG. 19 is displayed similarly to step S22, and the palm of the user is guided by the vein sensor 1 of the authentication device 26. FIG. Then, after step S24, the screen G7 during authentication processing is displayed, and the identity verification screen G8 of FIG. 19 is displayed by step S26.

Further, for verification by step S28, the palm guidance screen G9 of FIG. 19 is displayed, and the palm of the user is guided by the vein sensor 1 of the authentication device 26. And if the imaging result is favorable by step S30, the blood vessel image data C of a palm is obtained, and the authentication process screen G10 of FIG. 20 is displayed.

And if the identity can be confirmed by biometric authentication with the new IC card 5-1 in step S32, the registration end screen G11 of FIG. 20 is displayed, and the biometric authentication of the agent who received approval of the principal other than the principal is performed. When the blood vessel image of the palm of the agent is registered, the registration continuation screen G14 of FIG. 20 is displayed by touching the registration icon of the next biometric data from the UOP 6-1, and the flow returns to step S22.

When the next biometric data is not registered in step S36, the vein authentication function of the old IC card 5 is deactivated, and the return screen G12 of the new IC card 5-1 in FIG. The new IC card 5-1 is returned from the IC card reader / writer 61. In addition, the return screen G13 of the old IC card 5 shown in FIG. 20 is displayed, and the old IC card 5 is returned from the IC card reader / writer 9-1.

[Other Embodiments]

In the above-described embodiment, the biometric authentication has been described as the palm vein pattern authentication, but it can be applied to the authentication of other palm features such as the vein pattern of the finger or the palm of the hand or other biometric authentication such as a fingerprint or a face. In addition, although the IC card updater or automatic machine of the financial business has been described, it can be applied to other tasks such as automatic ticket vending machines, vending machines, other fields such as automatic computers and computers, door opening / closing requiring other personal authentication, and keys.

In addition, although there are two matching data, the terminal and the IC card are used for matching, but only the IC card may be used for matching, and one type of the matching data may be used. Similarly, although an example using two IC card readers / writers has been described, the update can also be performed by one IC card reader / writer. For example, a configuration may be adopted in which the old IC card is inserted, then read, and the new IC card is inserted and read.

In addition, the old IC card can be recovered, and a form in which only the biometric authentication function is closed without deleting the biometric data of the old IC card can be adopted.

As mentioned above, although this invention was demonstrated by the Example, various changes are possible for this invention within the range of the meaning of this invention, and these are not excluded from the scope of this invention.

(Supplementary Note 1) An IC card which updates the IC card having the function of biometric authentication by registering the characteristic data of the living body detected from the living body and comparing the registered characteristic data with the characteristic data of the living body obtained by detecting the living body. An update device comprising: a detection device for detecting the living body, an IC card reader / writer for reading / writing the old IC card and a new IC card to be updated, and extracting feature data of the living body from the output of the detection device; And a control unit for transmitting to the old IC card, wherein the control unit has good biometric authentication as a result of comparing the registered feature data with the transmitted feature data by the biometric authentication function of the old IC card. When the extracted feature data is registered in the new IC card. .

(Supplementary Note 2) The IC card updating apparatus according to Supplementary Note 1, wherein the control unit closes the biometric authentication function of the old IC card after registration with the new IC card.

(Supplementary Note 3) In Supplementary Note 1, the control unit checks the owner information of the old IC card and the new IC card read by the IC card reader / writer, and checks the correspondence between the old IC card and the new IC card. An IC card updating apparatus having a biometric authentication function characterized by checking validity.

(Supplementary Note 4) In Supplementary Note 1, the control unit checks the validity of the old IC card and the new IC card from the issue information of the old IC card and the new IC card read by the IC card reader / writer. An IC card updating apparatus having a biometric authentication function.

(Supplementary Note 5) The IC card updating apparatus according to Supplementary Note 1, wherein the control unit deletes the feature data in the old IC card after registration with the new IC card.

(Supplementary Note 6) The IC card updating apparatus according to Supplementary Note 1, wherein the detection device is configured with an imaging device for imaging a user's living body.

(Supplementary note 7) An IC card updating apparatus having a biometric authentication function, wherein the imaging device includes a unit for imaging a blood vessel image of the user.

(Supplementary Note 8) The IC card reader / writer comprises a first IC card reader / writer for reading / writing the old IC card, and a second IC card reader / writer for reading / writing the new IC card. An IC card updating apparatus having a biometric authentication function.

(Supplementary Note 9) In Supplementary Note 1, after the control unit registers the feature data on the new IC card, the control unit again detects the living body from the detecting device, and extracts the feature data of the living body from the output of the detecting device. And a biometric authentication function which transmits to the new IC card to collate the registered feature data with the transmitted feature data with the new IC card.

(Supplementary Note 10) The biometric authentication function according to Appendix 1, wherein the old IC card and the new IC card have only the biometric authentication functions of the old and new IC cards to access the registered biometric characteristic data. An IC card updating apparatus having.

(Appendix 11) An update method of an IC card having a function of biometric authentication by registering feature data of a living body detected from a living body and detecting the living body and the registered characteristic data. Detecting a living body, extracting feature data of the living body, transmitting the extracted characteristic data to an updated old IC card, and transmitting the registered characteristic data and the transmission by the biometric authentication function of the old IC card. Matching the extracted feature data, and registering the extracted feature data to the new IC card when the biometric authentication is satisfactory based on the matching result. .

(Supplementary Note 12) The method according to Supplementary Note 11, further comprising closing the biometric authentication function of the old IC card after registration with the new IC card. .

(Supplementary Note 13) In Supplementary Note 11, the identification information of the old IC card and the new IC card is compared with the old IC card read by the IC card reader / writer before the biometric detection, and the correspondence of the old IC card and the new IC card is verified. The method of updating an IC card having a biometric authentication function further comprising the step of confirming.

(Supplementary Note 14) The method of Supplementary Note 11, wherein the validity of the old IC card and the new IC card is verified from the issue information of the old IC card and the new IC card read by the IC card reader / writer before the biometric detection. Update method of the IC card having a biometric authentication function further comprising.

(Supplementary Note 15) The method of Supplementary Note 11, further comprising the step of deleting the feature data in the old IC card after registration with the new IC card.

(Supplementary Note 16) The method of updating an IC card having a biometric authentication function according to Supplementary note 11, wherein the detecting step comprises imaging a user's living body with an imaging device.

(Supplementary Note 17) The method of updating an IC card having a biometric authentication function according to Supplementary note 16, wherein the imaging step is performed by imaging a blood vessel image of the user.

(Supplementary Note 18) In Supplementary Note 13, the verification step is performed by a first IC card reader / writer for reading / writing the old IC card and a second IC card reader / writer for reading / writing the new IC card. And updating the owner information, wherein the IC card has a biometric authentication function.

(Supplementary Note 19) In Supplementary Note 11, after registering the feature data on the new IC card, the living body is detected again from the detection device, the feature data of the living body is extracted from the output of the detection device, and the new IC And transmitting the registered feature data and the transmitted feature data to the new IC card by sending them to a card.

In the present invention, since identity verification is performed by biometric authentication with an old IC card, identity card and biometric authentication with biometric authentication function can be strictly performed, and fraud at the time of renewal can be prevented. If the confirmation is satisfactory, the biometric data obtained by this biometric authentication is registered in the new IC card whose validity is confirmed. As a result, the biometric data that has been identified by the old IC card can be registered to the new IC card without leaking to the new IC card in one imaging, and the biometric data can be easily and reliably transplanted into the new IC card. have.

Claims (5)

An IC card updating apparatus which registers characteristic data of a living body detected from a living body, and updates an IC card having a function of biometric authentication by comparing the characteristic data of the living body obtained by detecting the living body with the registered characteristic data. A biological detection device provided separately from the IC card and configured to image a living body; An IC card reader / writer that reads / records the old IC card and the new IC card to be updated; A control unit which extracts the characteristic data of the living body from the output of the detection device and transmits it to the old IC card. Including, The control unit, The biometric authentication is based on a result of receiving the characteristic data of the living body from the detection device, transmitting it to the old IC card, and comparing the registered feature data with the transmitted feature data with the biometric authentication function of the old IC card. The IC card updating apparatus provided with the biometric authentication function, characterized in that the feature data received from the detection device is registered in the new IC card when it is satisfactory. The IC card updating apparatus according to claim 1, wherein the control unit closes the biometric authentication function of the old IC card after registration with the new IC card. A method of updating an IC card having a function of biometric authentication by registering characteristic data of a living body detected from a living body and comparing the registered characteristic data with the characteristic data of a living body obtained by detecting the living body, Detecting a living body, extracting feature data of the living body, and transmitting it to a control device by a living body detecting device provided separately from an IC card to image a living body; Transmitting, by the control device, the extracted feature data to an updated old IC card; Collating the registered feature data with the transmitted feature data with the biometric authentication function of the old IC card; Registering, by the control device, the extracted feature data to the new IC card when the biometric authentication is good according to the verification result; Update method of the IC card having a biometric authentication function comprising a. 4. The method of claim 3, further comprising closing the biometric authentication function of the old IC card after registration with the new IC card. The method according to claim 3, wherein before the biometric detection is performed, owner information of the old IC card and the new IC card read by the IC card reader / writer is collated, and the corresponding validity of the old IC card and the new IC card is confirmed. The method of updating an IC card having a biometric authentication function, further comprising the step.

Images